From d4baed454fb45466f29a19518991be5200a08bde Mon Sep 17 00:00:00 2001 From: Gary Lockyer Date: Thu, 7 Feb 2019 09:57:14 +1300 Subject: WHATSNEW: winbind authentication logging Signed-off-by: Gary Lockyer Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Wed Feb 20 07:43:10 CET 2019 on sn-devel-144 --- WHATSNEW.txt | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) (limited to 'WHATSNEW.txt') diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 85c417a61a9..79d114883c0 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -30,6 +30,27 @@ worker processes at startup and share the client connections amongst these workers. The number of worker processes can be configured by the 'prefork children' setting in the smb.conf (the default is 4). +Authentication Logging. +----------------------- + +Winbind now logs PAM_AUTH and NTLM_AUTH events, a new attribute "logonId" has +been added to the Authentication JSON log messages. This contains a random +logon id that is generated for each PAM_AUTH and NTLM_AUTH request and is passed +to SamLogon, linking the windbind and SamLogon requests. + +The serviceDescription of the messages is set to "winbind", the authDescription +is set to one of: + "PASSDB, , " + "PAM_AUTH, , " + "NTLM_AUTH, , " +where: + is the name of the command makinmg the winbind request i.e. wbinfo + is the process id of the requesting process. + +The version of the JSON Authentication messages has been changed to 1.2 from 1.1 + + + REMOVED FEATURES ================ -- cgit v1.2.1